PA
Product
parisneo/lollms-webui
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 20High 22Medium 8Low 3
Watch
Add parisneo/lollms-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8898 | 9.8 | Mar 20 | Path Traversal in parisneo/lollms-webui Affected: before V12 |
| CVE-2024-2359 | 9.8 | Jun 6 | Improper Neutralization of Special Elements used in an OS Command in parisneo/lollms-webui Affected: through latest |
| CVE-2024-2360 | 9.8 | Jun 6 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-3322 | 9.8 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-4320 | 9.8 | Jun 6 | Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui Affected: through latest |
| CVE-2024-2624 | 9.8 | Jun 6 | Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui Affected: before 9.4 |
| CVE-2024-5482 | 9.8 | Jun 6 | SSRF in add_webpage endpoint in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4267 | 9.8 | May 22 | Remote Code Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4326 | 9.8 | May 16 | Remote Code Execution via `/apply_settings` and `/execute_code` in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2358 | 9.8 | May 16 | Path Traversal leading to Remote Code Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1601 | 9.8 | Apr 16 | SQL Injection in parisneo/lollms-webui Affected: before 9.2 |
| CVE-2024-1520 | 9.8 | Apr 10 | OS Command Injection in parisneo/lollms-webui Affected: before 9.1 |
| CVE-2024-1511 | 9.8 | Apr 10 | Path Traversal Vulnerability in parisneo/lollms-webui Affected: through latest |
| CVE-2024-2356 | 9.6 | Feb 2 | Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui Affected: before v9.5 |
| CVE-2024-2361 | 9.6 | May 16 | Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1600 | 9.3 | Apr 10 | Local File Inclusion in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-8581 | 9.1 | Mar 20 | Path Traversal in parisneo/lollms-webui Affected: before v14 |
| CVE-2024-1873 | 9.1 | Jun 6 | Path Traversal and Denial of Service in parisneo/lollms-webui Affected: before v9.3 |
| CVE-2024-2362 | 9.1 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: through latest |
| CVE-2024-2366 | 9.0 | May 16 | Remote Code Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-9920 | 8.8 | Mar 20 | Unrestricted File Upload and Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4403 | 8.8 | Jun 10 | CSRF in restart_program in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1522 | 8.8 | Mar 30 | Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui Affected: before 9.2 |
| CVE-2024-9919 | 8.4 | Mar 20 | Missing Authentication Check in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4897 | 8.4 | Jul 2 | Remote Code Execution in parisneo/lollms-webui Affected: through latest |
| CVE-2024-3435 | 8.4 | May 16 | Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-3126 | 8.4 | May 16 | Command Injection in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2288 | 8.3 | Jun 6 | CSRF File Upload Vulnerability in parisneo/lollms-webui Affected: before 9.3 |
| CVE-2024-1646 | 8.2 | Apr 16 | Authentication Bypass in parisneo/lollms-webui Affected: before 9.3 |
| CVE-2024-4328 | 8.1 | Jun 10 | CSRF in clear_personality_files_list in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4498 | 7.7 | Jun 25 | Path Traversal and RFI Vulnerability in parisneo/lollms-webui Affected: through latest |
| CVE-2024-12766 | 7.5 | Mar 20 | SSRF in parisneo/lollms-webui Affected: through latest |
| CVE-2025-1451 | 7.5 | Mar 20 | Insufficient Patch Leading to DoS in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6394 | 7.5 | Sep 30 | Local File Inclusion in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6250 | 7.5 | Jun 27 | Absolute Path Traversal in parisneo/lollms-webui Affected: through latest |
| CVE-2024-2548 | 7.5 | Jun 6 | Path Traversal in parisneo/lollms-webui Affected: before 9.5 |
| CVE-2024-2178 | 7.5 | Jun 2 | Path Traversal Vulnerability in parisneo/lollms-webui Affected: through latest |
| CVE-2024-4322 | 7.5 | May 16 | Path Traversal in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1569 | 7.5 | Apr 16 | Uncontrolled Resource Consumption in parisneo/lollms-webui Affected: before 9.2 |
| CVE-2024-5125 | 7.3 | Nov 14 | XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui Affected: before 9.8 |
| CVE-2024-6674 | 7.1 | Oct 29 | Data Leak through CORS Misconfiguration in parisneo/lollms-webui Affected: before 10 |
| CVE-2024-6959 | 7.1 | Oct 13 | Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui Affected: through latest |
| CVE-2024-10019 | 6.7 | Mar 20 | Path Traversal and OS Command Injection in parisneo/lollms-webui Affected: through latest |
| CVE-2024-8736 | 6.5 | Mar 20 | Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6673 | 6.5 | Oct 29 | CSRF Vulnerability in parisneo/lollms-webui Affected: before 9.9 |
| CVE-2024-2299 | 6.1 | May 12 | Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui Affected: through latest |
| CVE-2024-1602 | 6.1 | Apr 10 | Stored XSS leading to RCE in parisneo/lollms-webui Affected: through latest |
| CVE-2024-6986 | 5.4 | Mar 20 | Cross-site Scripting (XSS) in parisneo/lollms-webui Affected: through latest |
| CVE-2024-5933 | 5.4 | Jun 27 | Cross-site Scripting (XSS) in parisneo/lollms-webui Affected: through latest |
| CVE-2024-10047 | 5.3 | Mar 20 | Directory Listing Vulnerability in parisneo/lollms-webui Affected: through latest |